SANGFOR SSL VPN Rapid, Secure & Simple With the development of cloud computing and mobile devices, modern workforces have become increasingly mobilized and distributed. This trend requires business organizations to prepare its IT infrastructure to facilitate a secure and efficient remote access to business resources with full efforts. SANGFOR understands those business challenges and is committed to provide solutions for those increasing demands of modern enterprises. Compared with other existing SSL VPN solutions, SANGFOR SSL VPN offers the best level business driven solution with extraordinary access speed and security technologies.
Transcript
SANGFOR SSL VPNRapid, Secure & Simple
With the development of cloud computing and mobile devices, modern
workforces have become increasingly mobilized and distributed. This
trend requires business organizations to prepare its IT infrastructure to
facilitate a secure and e�cient remote access to business resources with
full e�orts.
SANGFOR understands those business challenges and is committed to
provide solutions for those increasing demands of modern enterprises.
Compared with other existing SSL VPN solutions, SANGFOR SSL VPN
o�ers the best level business driven solution with extraordinary access
speed and security technologies.
SANGFOR SSL VPN
Rapid, Secure & Simple
01
SANGFOR SSL VPN Solution
By using the exclusive acceleration technology of SANGFOR SSL VPN, enterprises are able to provide users with a satisfied and e�cient remote access experience, which improves the work productivity of remote workforces.
Less Bandwidth Required
Compression is commonly used in other solutions but not enough to o�er a high-speed
SSL VPN connection. SANGFOR SSL VPN innovate by adopting the Byte Cache
technology into SSL VPN sessions, which e�ectively eliminates 30-90% of redundant
tra�cs on SSL VPN links and improves the access speed of remote users.
Smooth Performance under Harsh Network Environments
Under harsh network environments such as cross-border and cross-operator with high
packet loss rate or high latency, the access speed would be significantly lower than one
had expected.
SANGFOR SSL VPN employs HTP (High-speed Transfer Protocol) to smooth the transfer
environment and minimize the negative impact of packet loss and latency. End users are
able to consistently enjoy a favorable access experience.
Access Optimization on Tablets and Mobile Devices
In order to solve the display and slow connection problems that tablets and mobile
devices users might encounter when accessing browser-based applications, SANGFOR
SSL VPN not only optimizes the page display and mobile access, but also provides
various image optimization policies such as image filtering and compression to prevent
the problems mentioned above.
Full Utilization of Resources
Considering real-life deployment, SANGFOR SSL VPN is also equipped with Intelligent
Link Selector. The Intelligent Link Selector can automatically select the optimal link for
remote access when there are multiple links.
Rapid
Never Been So Fast !SANGFOR SSL VPN provides remote user
with extraordinary access performance and
experience by embedding acceleration
technologies without additional license fee !
Rapid, Secure & Simple
02
Identity Authentication
Authentication
Support up to 8 types of authentication methods.
User name/password, LDAP, RADIUS, CA (Certification Authority).
Certificate/USB key based authentication, Dynamic token, Hardware ID, SMS.
Host Checker
Endpoint detection and scanning of operating system, registry files, personal firewall, anti-virus files, user- customized security rules and
other security policies prior to user login as well as during SSL VPN session.
Account Binding
Binds SSL VPN user accounts to authorized applications accounts for account compliance and management.
Transmission Security
Tunnel Encryption
SSL session encryption.
Dedicated SSL VPN Tunnel
Provides the flexibility of disconnecting all other Internet connections but SSL VPN session to prevent intrusions and attacks from Internet.
Man-in-the-middle Attack Detection
Detects and alerts if the endpoint is su�ering from Man- in-the-middle" Attack before it is connected to the Intranet.
Cache Cleanup
Wipes o� any cached data when the SSL VPN session terminates, which avoids data leakage if any remote users are accessing SSL VPN
with a public endpoint.
Resources Authorization Policy
“User-Role-Resource”Assignment
Accurately and meticulously assigns resources to specifically defined users or roles, which avoids unauthorized usage of published
applications.
SANGFOR SSL VPN has built-in all-round security protection polices including identity authentication, endpoint security, transmitting
security and resources authorization polices to achieve a secure remote connection.
Secure
Rapid, Secure & Simple
SANGFOR SSL VPN simplifies the account/authentication by allowing administrators to do seamless combination with the LDAP/RADIUS
servers and supporting SSO (single-sign-on) with published applications.
Application Virtualization Delivers Applications as On-demand Service
With new diversity of endpoints and business applications, IT managers have always been looking for a better remote access solution. This
way business applications can be securely delivered to remote workforces as an on-demand service via a browser, with no limitation to
remote workspaces, application types or available endpoints. SANGFOR SSL VPN Remote Application is the solution.
SANGFOR Remote Application for Application Virtualization
Interfaces of published applications are pushed to endpoints screens as virtual access windows, so end users are able to remotely access
the applications through a browser.
Operation and control on applications occur in the server end, no business data will be stored locally.
With SANGFOR Remote Application, business applications are virtualized, centralized and managed in the datacenter and instantly delivered
as a service to those users in need. Since everything occurs within the virtual application servers, users are virtually operating in the
enterprise network, which prevents any possibility of data leakage.
Smooth Access from Tablets and Smart Phones
As business applications are delivered to remote workforce as on-demand service, remote workforces can now access any published
applications freely from any endpoints with a browser including mobile devices, no matter the applications are based on Windows or in the
form of B/S and C/S.
Flexible Deployment
Various deployment features are o�ered for consolidating it into the existing IT infrastructure with typical functions such as the asymmetrical
cluster and cloud cluster. Asymmetrical cluster supports robust clustering of di�erent hardware models for scalability. Cloud cluster assigns
SSL VPN requests to the fastest and most healthy appliance when SSL VPNs are deployed in multiple data centers that are located in di�erent
places.
03
SANGFOR SSL VPN
Simple
SANGFOR SSL VPN
Server-based applicationsRemote operation
Keyboard input, mouse click
Interfaces of remote applications
Rapid, Secure & Simple
EasyConnect Remote Access and
Mobile O�ce for EnterprisesWith Sangfor EasyConnect APP, you are able to access any business applications (Lotus notes, Exchange, OA, SAP, ERP, CRM, etc.) remotely from your smartphones and tablets!
How does it work ?
EasyConnect is the perfect mobile o�ce solution for business organizations, especially for those that require superior connectivity for remote
branches and business travelers. The APP leverage Sangfor’s unique remote application technology to simplify mobile and remote access.
To work properly, remote application service needs the following components:
Remote and mobile connectivity has always been of value to enterprises. With the
increasing popularity of smartphones and tablets, there is an ever increasing
demand for a convenient and secure approach for remote access to corporate data
to perform business activities. However, as the enterprises are expanding the
network infrastructure to the remote workforce, IT managers can find it extremely
di�cult to provide full application availability for tablets and smartphones due to
resource compatibility, OS support and security concerns.
Sangfor EasyConnect
Sangfor EasyConnect, is the tailor-made APP for remote users to access business
applications with mobile devices anytime and anywhere, as long as there is a
network connection. Remote users are now able to work anywhere!
04
Rapid, Secure & Simple
With the remote application enabled, published application interfaces are available on the mobile screens. Thus, users will operate on the
virtualized graphical interfaces.
Furthermore, since all processes are conducted in the virtual application servers, by all means users are virtually operating within the
corporate network only, avoiding any possibility of information leakage.
Remote Application Module
The core of remote application service that is embedded in SSL VPN device, in charge of identity authentication, obtaining resource
information from remote servers, data processing and so on.
RemoteApp Agent
One ActiveX control that should be installed on remote application server and plays the role of providing remote application service and
monitoring server status. By default, auto-start is enabled.
Application Client Program
Application client should be installed on the remote application server before publishing the application (such as MS O�ce, WordPad).
RemoteApp Client
A SSL VPN client that should be installed on client end and provides service of connecting to remote server.
SANGFOR SSL VPN
05
Benefits
Workforce Mobility Drives Business Productivity and Continuity
Business travelers are now able to access the business application systems, to work e�ectively without limitation of location, time or
available endpoints, boosting mobile workforce productivity while guarding the business continuity.
Full Application Availability to Smart Devices
Secure Mobile O�ce without Leakage Risk
Higher IT Productivity by Maximizing Value of IT Resource
Rapid, Secure & Simple
SSL VPN Datasheet
06
SANGFOR SSL VPNRapid, Secure, Simple
SANGFOR SSL VPN solution can be a convenient and e�ective way of landing a large number
of security mechanisms and end-user groups in achieving safe and e�cient remote access to
enterprise applications, ensuring application system availability for remote workforce while
preventing business data exposed to direct risks of internet attacks.
Model M5100-S-I M5400-S-I M5600-S-I
Profile
RAM
HD Capacity
Concurrent Users
1U
1G
500G
300
1U
2G
500G
1200
2U
4G
500G
3800
Model M5100-S-I M5400-S-I M5600-S-I
10/100/1000 Base-T (WAN)
10/100/1000 Base-T (LAN)
10/100/1000 Base-T (DMZ)
SFP
2
1
1
N/A
4
1
1
N/A
2
1
1
4
Product Family
Network Interfaces
Model M5100-S-I M5400-S-I M5600-S-I
Compliance CE, FCC CE, FCC CE, FCC
Compliance and Certifications
Model M5100-S-I M5400-S-I M5600-S-I
Dual Power Supplies
Power [Watt] (Typical)
Temperature
Relative Humidity
System Dimensions (W×L×H×mm3)
System Weight
N/A
40W
-10~50℃5%~95% non-condensing
430×300×44.5
4.0 Kg
N/A
180W
-10~50℃5%~95% non-condensing
430×430×44.5
6.65 Kg
Y
212W
-10~50℃5%~95% non-condensing
440×500×89
15.3 Kg
Power and Physical Specifications
All performance values are “up to” and vary depending on the system configuration.
Rapid, Secure & Simple
SANGFOR SSL VPN
07
SANGFOR SSL VPN: Product Features
User Authentication
Security Protection
Authentication
Import of User Accounts
Import of SSL Accounts
CA Authentication
Account Attribution Options
Account Decurity Enhancement Policies
Host Checker
Man-in-the-Middle Attack Detection
Dedicated SSL VPN Tunnel
Virtual Secure Portal
Resource Path Hiding
Cache Cleanup
Account Binding
SMS Password Reset
Support authentication with combination of AD, local password, LDAP/RADIUS, Certificate/USB
key, dynamic token, hardware ID and SMS.
- Import user accounts information using CSV file, LDAP Server.
- Synchronize user with LDAP, Database and H3C CAMS Server.
Support import of user accounts via CSV file.
Allow import of local/external CA authenticated certificate.
- Private account for single user.
- Public account that allow access for multiple users.
On-screen keyboard, CAPTCHA, password security options, etc.
Endpoint detection and scanning of operating system, registry files, personal firewall, anti-virus
files, user- customized security rules and other security policies prior to user login, and during the
SSL VPN session.
Support for creating up to 253 independent secure portals, by which di�erent user groups are
able to enjoy di�erent SSL VPN access addresses, authentication methods, application resource,
administrators, etc.
Bind user’s application account and his/her SSL VPN account together for unified authorization
and simplified account administration.
Detects if the endpoint is su�ering from a Man-in-the- middle attack before it is connected to the
internal network and send out alert if any attack is detected.
Possibility to disconnect other internet connections when the SSL VPN tunnel is created.
Support for hiding, masquerading of SSL VPN resource path to protect resource security.
Sangfor SSL VPN supports password retrieval via SMS.
Secure and safe deletion of sensitive data after session termination.
Rapidity and Access Performance
Byte Cache
Streaming Compression
Web Cache
High-speed Transfer Protocol (HTP)
Webpage Access Optimization
Intelligent Link Selection
Cache data at byte level to ensure the SSL VPN data tra�c is de-duplicated, greatly reduces the
demanded bandwidth of remote access.
Streamline data packets under high packet loss and network latency network environment such
as wireless and cross- border.
Conduct LZO, GZIP/ZLIB compression to TCP and Web applications to decrease the data
transmission volume.
Especially optimize accesses to web resource by adopting web cache.
Dynamic reduction of web pages and images sizes displayed on mobile devices resulting in faster
performance and better user experience.
Automatically choose the healthy and quickest link for remote access when a network has
multiple operators lines.
Rapid, Secure & Simple
08
Please do not hesitate to contact us by email or by phone if you need more information about our SSL VPN features.
Appliance management
Cross Platform Support
Resource Compatibility
Bandwidth Control
Logging & Reporting
- Windows, Linux, Mac OS, iOS, and Android OS.
- IE, Opera, Firefox, Safari, Google Chrome and other browsers that support https.
- Display real-time status including CPU, link tra�c, network throughput, concurrent sessions, byte
cache status, etc. connected SSL VPN users.
- Online user information: access time, authentication methods, concurrent sessions, tra�c flow,
IP address, etc.
- Alarm, error, debugging, system management logs, back up logs can dump and save externally.
- Syslog support.
Web app, TCP app, L3VPN, Full support to all kinds of B/S, C/S applications.
